Wednesday, June 6, 2007

Wi-fi packet sniffing on Ubuntu

Packet sniffers let you take a look at the network traffic of a wireless netwo
seeing what websites are people visiting, watch chat conversations, captur
unencrypted passwords, or just see how packets flow through different pro
This tutorial will show you how to discover wireless network and passively
(without interfering) sniff their traffic on Ubuntu (Edgy).

Drivers
Although many WLAN cards are supported by default in Ubuntu, some are not. Try downloading and installing the latest Orinoco or Prism2 drivers. Links are listed in the end of the text
Probably the easiest way to do this is installing a package called Wifi-radar. Wifi-radar will let you see the SSID, signal strenght, mode and type of the 802.11 standard (b, g, etc.) It doesn't provide much details, but for very basic use it's OK. Of course, there are tools that provide more details about wireles s networks.
Kismet is probably the most popular tool among wardrivers who use Linux. It sniffs traffic passively, maki ng it impossible to be detected and it even supports GPS. So go to http://packages.ubuntu.com and download Kismet from the networking
section. Install the package. Before you start, you'll have to modify the kismet.conf file.
Open /etc/kismet/kismet.conf with your favourite text editor and modify the source option to fit your needs. For example: source=orinoco,wlan0,kismet Now start Kismet from the terminal, using the sudo kismet command (root privileges).

No comments: